- finish security, validation